Apress Access

iOS Forensic Analysis

for iPhone, iPad, and iPod touch

By Sean Morrissey

  • eBook Price: $45.99
Buy eBook Buy Print Book
iOS Forensic Analysis provides an in-depth look at investigative processes for the iPhone, iPod touch, and iPad devices.

Full Description

  • Add to Wishlist
  • ISBN13: 978-1-4302-3342-8
  • 372 Pages
  • User Level: Beginner to Intermediate
  • Publication Date: December 20, 2010
  • Available eBook Formats: EPUB, MOBI, PDF

Related Titles

  • Beginning Xcode: Swift 3 Edition
  • Practical Swift
  • Migrating to Swift from Flash and ActionScript
  • Agile Swift
Full Description

iOS Forensic Analysis provides an in-depth look at investigative processes for the iPhone, iPod Touch, and iPad devices. The methods and procedures outlined in the book can be taken into any courtroom. With never-before-published iOS information and data sets that are new and evolving, this book gives the examiner and investigator the knowledge to complete a full device examination that will be credible and accepted in the forensic community.

What you’ll learn

  • How to respond to security incidents involving iOS devices
  • How to acquire and analyze data on iOS devices such as iPhone and iPad
  • How to analyze media exploitation on iOS devices

Who this book is for

Computer forensic professionals, law enforcement, attorneys, security professionals, those who are curious about such things, and educators.

This book can also be employed by law enforcement training academies and universities, as well as computer forensics, information security, and e-discovery communities.

Table of Contents

Table of Contents

  1. History of Apple Mobile Devices
  2. iOS Operating and File System Analysis
  3. Search, Seizure, and Incident Response
  4. iPhone Logical Acquisition
  5. Logical Data Analysis
  6. Mac and Windows Artifacts
  7. GPS Analysis
  8. Media Exploitation
  9. Media Exploitation Analysis
  10. Network Analysis

If you think that you've found an error in this book, please let us know by emailing to editorial@apress.com . You will find any confirmed erratum below, so you can check if your concern has already been addressed.

On page 42:

Table 2-1 is incomplete. For example, "Tmp; has a symbolic link to" is a complete entry. There are a couple of rows like that.


    1. PHP Objects, Patterns, and Practice


      View Book

    2. Beginning Android 3D Game Development


      View Book

    3. Troubleshooting Oracle Performance


      View Book

    4. Beginning Amazon Web Services with Node.js


      View Book